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IN THE CLAIMS: 

This listing of claims will replace all prior versions^ and listings, of claims in the 
application. 

1 , (Cucf etidy amended) A security policy method comprising the steps of: 
associating wildcarded resource identifiers with a corresponding security policy; 

and 

matching a resource identifier received in an access request to one of a list of said 
wildcarded resource ideiitifierB, wherein said matching is detemiined in accordance with 
a predetermined set of ^Jrecedenco values, each precedence value of said predetermined 
set of precedence values corresponding to a predetermined wildcard element. 

2, (Original) The method of claim 1 wherein each predetermined wildcard element 
comprises a regular expression element. 

3 , (Corr^tiV amended) The method of claim 1 further comprising the step of 
selecting, in response to a security policy associated with a wildcarded resource identifier 
&om said matching step, one of a grant of access to a requested resource corresponding to 
said resource identifier and a denial of access to said requested resource. 

4, (Original) The method of claim 1 wherein said list of said wildcarded resource 
identifiers comprises an ordered list of wildc^pded resource ideritifiers, said ordered list 
being ordered in accordance with said predetermined set of precedence values. 

5, (Currently amended) The method of claim 4 wherein said step of matching said 
resource idraitifier received in said access request comprises the steps of: 

sequentially comparing said resource identifier received in said access request 
with each wildcarded resource identifier in said ordered list; and 
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in response to a comparison, terminating said comparing step, and returning a 
policy associated with a wildcarded resource identifier from said comparing step. 

6. (Ciutently amended) The method of claim 4 further comprisdng the step of 
ordering a list of wildoord e d r e ooiiro e identifi e ni to generat e said ordered list of efd^?e^ 
wildcarded resource identifiers. 

7, (Currently amended) The method of claim 6 wherein said step of ordering [ [e]] 
said ordered list of wildcarded resource identifiers incliodes the steps of: 

selecting a pair of wildcaided resource identifiers from a list in accordance with a 
pxedetennined sorting process; 

sequentially selecting elements in each identifier of said pair of wildcarded 
resource identifiers; 

comparing a first precedence value corresponding to a first one of a selected 
eletiient of said pair of wildcaided resource identifiers and a second precedence value 
corresponding to a second one of a selected clem^t of said pair of wildcarded resource 
identifiers, wherein said first precedence value and said second precedence value each 
comprise a predetermined value from said predetermined set of precedence values; and 

if said first precedenice value and said second precedence value oorrespond i^ axe 
not equal, ordi^ring said pair of wildcarded resource identifiers according to said first 
precedence value and said second precedence value . 

8, (Currently amended) The method of claim 7 further comprising the step of 
returning siaid pair of wildcarded resource identifiers from said ordering step to said 
pr ese l e ct e d predetcnnined sorting process. 

9. (Curr^tly amended) Hie laethod of claim 1 wherein said predetcnnined set of 
precedence values comprises: 

a first precedence value having a highest precedence corresponding to an exact 
character, a second precedence valtio having a nejct lower precedence fix>m said first 
precedence value, corresponding to a character range; 
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a third precedence value, liaving a next lower precedence from said second 
precedence value, cotrespondiiig to any character; 

a fourth precedence value, having a next lower precedence from said third 
precedence value, corresponding to a repeating exact character; 

a fifth precedence value, having a next lower precedence from said fourth 
precedence value, corresponding to a repeatblg character range; and 

a sixth preced^cc value, having a next lower preciedence from said fifth 
precedence value, corresponding to any character string, and wherein said sixth 
precedence value comprises a lowest precedence value. 

10, (Currently amended) A security poli cy system comprising; 
circuitty operable for associating wildcarded resource identifiers with a 

corresponding security policy; and 

circuitry operable fitjr associating wildcarded resource identifiers with a 
corresponding security policy matching a resource identifier received in an access request 
to one of a list of said wildcarded resource identifiers, wherein said matching is 
determined in accordance with a predeteimincd set of precedence values, each 
precedence value Of said predetetmined set of precedence values corresponding to a 
predetermined wildcard element. 

1 1 , (Original) The system of claim 1 0 wherein each predeteraiined wildcard element 
comprises a regul&r expression element. 

1 2, (Currently amended) The system of claim 1 0 fiirther comprising circuitry 
operable for selecting, in response to a security policy associated with a wildcarded 
resource identifier from said matching step, one of a grant of access to a requested 
resource corresponding to said resouice identifier and a denial of access to said requested 
resource* 

1 3 , (Currently amended) The system of claim 1 0 wherein said list of said wildcarded 
resource identifiers conqjrises an ordered list of wild e doard e d wildcarded resource 
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ideoitifiers* said ordered list being ordered in accordance with said predetermined set of 
precedence values. 

14. (Cuixently amended) The system of claim 13 wherein said circuitry operable for 
matching said resource identifier received in said access request comprises: 

circuitry operable for sequentially comparing said resource identifier received in 
said access request with each wildcarded resource identifier in said ordered list; and 

circuitry operable for, in response to a comparison, terminating said comparing 
st^, and returning a policy associated with a wildcarded resource identifier from said 
comparing step. 

15. (Currently amended) The system of claim 13 further comprising circuitry 
operable for ordering a4igt of wildoaidod ro s oufo e identifi e r s to genemt e said ordered list 
of order e d wildcarded resource identifiers. 

1 6. (Currently amended) The system of claim 15 wherein said circuitry operable for 
flt^-Bf ordering [[a]] said ordered list of wildcarded resource identifiers includes: 

circuitry operable for selecting a pair of wildcarded resource identifiers fh>m a list 
in accordance with a predetermined sorting process; 

circuitry operable for sequentially selecting elements in each identifier of said pair 
of wildcarded resource identifiers; 

circuitry operable for comparing a first precedence value corr^onding to a first 
one of a selected element of said pair of wildcarded resource identifiers and a second 
precedence value corresponding to a second one of a selected element of said pair of 
wildcarded resource identifiers^ wherein said first precedence value and said second 
precedence value each conlpriae a predetermined value from said predetermined set of 
precedence values; and 

circuitry operable for, if said first precedence value and said second precedence 
value oorr e spond mg are not equal, ordering said pair of wildcarded resource identifiers 
according to said first precedence value and said second precedence value. 
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17. (Currently amended) The system of claim 16 further comprising th e cicruitry 
ciituitrv operable for retumiag said pair of wildcarded resource identifiers firom said 
ordering step to said pr e g e l e oted predetermined sorting process. 

1 8. (Currently amended) The system of claim 1 0 wherein aaid predetermined set of 
precedence values comprises: 

a first precedence value having a highest precedence corresponding to an exact 
character, a second precedence value have a next lower precedence from said first 
precedence value, coitesponding to a character range; 

a third precedence value, having a next lower precedence from said second 
precedence value, corresponding to any character, 

a fourth prec^ence value, haiving a next lower precedence from said third 
precedence value, coiresponding to a repeating exact character, 

a fifth precedence value, having a next lower precedence from said fourth 
precedence value, corresponding to a repeating character range; and 

a sixth precedence value, having a next lower precedence from said fifth 
precedence value, corresponding to any character string, and wherein said sixth 
pirecedence value comprises a lowest precedence value. 

19. (Currently amended) A computer pmgram product in a machine readable 
medium of expression including programming for wildcarding security policies 
comprising programming instructions for performing the steps of: 

associating wildcarded resource identifiers with a corresponding security policy; 

matching a resource identifier received in an access request to one of a list of said 
wildcaided resource identifiers, wherein said matching is determined in accordance with 
a predetermined set of precedence values, each precedence value of said predetermined 
set of precedence values cor^responditig to a predetermined wildcard element. 

20. (Original) The program product of claim 19 wherein each predetermined 
wildcard element comprises a regular expression element. 
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21 . (Cuirently amended) The method of claim 1 9 further comprising programming 
instructions for perfoniring the Step of selecting, in response to a secxjrity pohcy 
associated with a wildcatdod resource identifier from said matching step, one of a grant 
of aic^cess to a requested resoitrce corresponding to said resource identifier and a denial of 
access to said requested resource^ 

22. (Cuireiitly amended) The program product of claim 19 wherein said list of said 
wildcarded resouixe identifiers comprises aia ordered list of wildedoordod wildcarded 
resource identifiers^ said ordered list heing ordered in accordance with said 
predetentiiBed set of precedence values. 

23. (Cixrrently ameiided) The program product of claim 22 wherein said program of 
instructions for performing the step of matching said resource identifier received in said 
access request comprises a program of instructions for performing flie steps of; 

sequentially comparing said resource identifier received in said access request 
witb eadh wildcarded resource identifier in said ordered list; and 

in response to a comparison, terminating said comparing step, ^id returning a 
policy associated with a wildcarded resource identifier fiom said comparing step. 

24. (Currently amended) The program product of claim 22 fiorther comprising 
programming instructions for performing the step of ordering a hot of wildoord e d 
r e souro e identifier s to gonoroto said ordered list of order e d wildcarded resource 
identifier&. 

25. (Cunentiy amended) The program product of claim 24 wherein said 
programming inrtmctions for performing the step of ordering [[a]] said ordered hst of 
wildcarded resource identifiers includes progranmmxg instructions for perfortning the 
steps of: 

selecting a pair of wildcarded resource identifiers firom a list in accordance with a 
predetermined sorting process; 
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sequentially selecting elements in each identifier of said pair of wildcarded 
resource idisntifiers; 

comparing a first precedence value corresponding to a first one of a selected 
element of said pair of wildcardesd resource identifiers and a second precedence value 
cotrespondirig to a second one of a selected element of saiid pair of wildcarded resource 
identifiers, wherein said first precedence value and said second precedence value each 
comprise a predetermined value fi-om said predetermined set of precedence values; and 

if said first precedence value and said second precedence value ooir e cpon<te ^ are 
not equal* ordering said pair of wildcarded resource identifiers according to said first 
precedence value and said second precedence. 

26. (CuTTcntly amended) The program product of claim 25 further comprising 
programming instructions for performing the step of returning said pair of wildcarded 
resource identifiers firom said ordering step to said pr e B a leot e d predetermined sorting 
process. 

27. (Currently amended) The program product of claim 1 9 wherein said 
predeterm ined set of precedence values comprises: 

a first precedence value having a highest precedence oottesponding to an exact character^ 
a s^ond precedence value have a next lower precedence from said first precedence 
value, conespondmg to a character range; 

a third precedence value, having a next lower precedence from said second 
precedente valxxe, corresponding to any character; 

a fourth precedence value, having a nesrt lower precedence firom said third 
precedence value, corresponding to a repeating exact character; 

a fifth precedence value^ having a next lower precedence fiom said fourth 
precedence value, corresponding to a repeating character range; and 

a sixth precedence value, having a next lower precedence fiom said fiftti 
precedence value^ corresponding to any character string, and wherein said sixth 
precedence value comprises a lowest ptecedence value. 
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28. (Currently amended) A security policy method comprising the steps of: 

associating wildcarded resource identifiers with a corresponding security policy; 

[Ml 

matching a resource idetitifier received in an access request to one of a list of said 
wildcarded resource idedtifiers, wherein said matching is detemMned in accordance with 
a predetentiined set Of precedence values, each precedence value of said predetermined 
set of precedence values corresponding to a predetennincd wildcard element, wherein 
each predetermined wildcard element comprises a regular expression element; and 

selecting, in response to a security policy associated with a wildcarded resource 
identifier from said matching step, one of a grant of access to a requested resource 
corresponding to said resource identifier and a denial of access to said requested resource, 
and wherein said list of said wildcarded resource identifiers comprises an ordered list of 
wildodoaidod wildcarded resource identifiers, said ordered list being ordered in 
accordance with said predetertnin^ set of precedence values. 
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